Agape Privacy Policy

1. Overview

Agape is a school management platform used by schools to administer academic records, attendance, results, and parent–teacher communication. Each school operates its own isolated Agape application instance with its own database, users, storage, and configuration. This policy describes how the school's Agape instance handles data.

2. Data We Handle

• Account information — administrators, teachers, and parents: name, user code, email, phone, photo, and role.
• Student records — name, student ID, gender, date of birth, class, parent/guardian contact details, address, and photo.
• Attendance — daily/session attendance status, arrival time, and notes.
• Academic results — test and exam marks, grades, remarks, and teacher/principal comments.
• Homework — homework details and any attached files (stored as URLs).
• Announcements, activities & events — school-wide notices and calendar entries.
• Fees — fee structures and payment records.
• Notifications — in-app and push notification delivery records.
• Device push tokens — used solely to deliver push notifications to your devices; tokens can be deactivated at any time.
• Audit & security records — logs of significant administrative actions for accountability.
• Uploaded files — documents and images stored per user within the school's instance.
• Archived & backup records — retained student archives and backup files for continuity and disaster recovery. Backup files should be stored securely by authorised staff.

3. How Data Is Used

Data is used only to operate the school: academic administration, attendance, results, communication, and reporting. Agape does not sell data to third parties and does not display advertising. Data is not shared across schools — each school's data stays within its own isolated instance.

4. Security

Access is protected by user-code/password authentication. Passwords are salted and hashed; sessions expire and can be revoked. Authorisation is enforced server-side by role (admin, teacher, parent) with row-level scoping, so users only access data appropriate to their role. Sensitive administrative actions are recorded in an audit trail.

5. Children's Data

Student information is provided and managed by the school and parents through their authorised accounts. The application is not directed at children for independent sign-up. Schools are responsible for obtaining any consents required under applicable law for the student data they enter.

6. Data Retention

Records are retained according to the school's own policy. Student records can be archived (e.g. on graduation or transfer) and deleted records can be held briefly in a recycle bin before permanent removal. Backups support disaster recovery for the school's instance.

7. Your Rights & Contact

Parents and staff may request access to, correction of, or deletion of their data by contacting the school's Agape administrator. For questions about this policy, contact the school administration.

8. Push Notifications

If enabled, push notifications are sent via Firebase Cloud Messaging to deliver school alerts. Device tokens are stored only to route notifications and are deactivated when no longer valid or on request. Notification content is limited to school communications.